popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
5251 2021-02-18 17:45 DEOappfYsSq5C13.exe  

f02bd49ed33a2243d71bb1bbe592f39b


VirusTotal Malware Buffer PE Check memory Checks debugger buffers extracted unpack itself 		3.0 M 10 ZeroCERT

5252 2021-02-18 17:46 cmd2.exe  

b32efdfbbda064434979296814e8875f


FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs DNS 		5 11 1 4 10.2 M 17 ZeroCERT

5253 2021-02-18 17:59 document.doc  

4261ec0a9edda9561c4dda5d8da7f98d


FormBook Malware download VirusTotal Malware Malicious Traffic exploit crash unpack itself malicious URLs Windows Exploit DNS crashed Downloader 		2 5 7 2 5.6 M 27 ZeroCERT

5254 2021-02-18 17:59 dxmanx.exe  

e1fad87e847735c141f999d5b024080d


VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces suspicious process malicious URLs WriteConsoleW Windows ComputerName DNS Cryptographic key crashed 		2 1 2 12.2 M 24 ZeroCERT

5255 2021-02-18 18:10 EWC.exe  

d9a30d4715edbd7428d377872b0f49a0


VirusTotal Malware RWX flags setting unpack itself DNS 		2.4 M 33 ZeroCERT

5256 2021-02-18 18:10 edi.js  

5f82fde65dfd751c2b602541e36ae6d7


Browser Info Stealer VirusTotal Email Client Info Stealer Malware powershell AutoRuns suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI heapspray Creates shortcut ICMP traffic unpack itself Windows utilities Check virtual network interfaces suspicious process malicious URLs AntiVM_Disk sandbox evasion WriteConsoleW VM Disk Size Check installed browsers check Windows Java Browser Email ComputerName DNS Cryptographic key DDNS keylogger 		6 3 21.4 M 4 ZeroCERT

5257 2021-02-18 18:32 higLyd1z5fHwrWa.exe  

9b4d73ebe99774a232e29b43ee1e96d4


VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows utilities suspicious process malicious URLs WriteConsoleW Windows ComputerName 		10.0 M 19 ZeroCERT

5258 2021-02-18 18:32 huaa.msi  

9155b960719fa978d1a26c54a5897cdd


VirusTotal Malware suspicious privilege Check memory Checks debugger unpack itself AntiVM_Disk VM Disk Size Check ComputerName DNS 		2.8 M 3 ZeroCERT

5259 2021-02-18 18:37 huaa.pdf.exe  

879951cddad7add207ee8ed634e4247a


VirusTotal Malware Check memory RWX flags setting unpack itself 		1.4 M 3 ZeroCERT

5260 2021-02-18 18:37 ICcVhvdlUe6FdY2.exe  

c5593207f9e831b1727fcf584f229a73


VirusTotal Malware Buffer PE Check memory Checks debugger buffers extracted unpack itself DNS 		3.6 M 15 ZeroCERT

5261 2021-02-18 18:40 jooo.exe  

19f3a1669176c3126ae4f89832ea265e


VirusTotal Malware Buffer PE Check memory Checks debugger buffers extracted unpack itself 		3.0 M 11 ZeroCERT

5262 2021-02-18 18:41 M9hXhq8tCvts4NK.exe  

6b7415c987b1bc9ded11a5af9ddbf403


VirusTotal Malware Buffer PE Check memory Checks debugger buffers extracted unpack itself DNS 		3.6 M 11 ZeroCERT

5263 2021-02-18 18:44 MLU.exe  

30463b0e753ea65c33791f701f68bf9f


VirusTotal Malware RWX flags setting unpack itself DNS 		2.2 M 27 ZeroCERT

5264 2021-02-18 18:44 maxs.exe  

e461c46a2ae8137c347fcb895c6bddf0


Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces suspicious process malicious URLs WriteConsoleW IP Check Tofsee Windows Browser Email ComputerName DNS Cryptographic key Software crashed keylogger 		2 3 1 1 14.6 M 16 ZeroCERT

5265 2021-02-18 21:23 hello.exe  

f146529e51a359d892943fe6da8cbbea


VirusTotal Malware WriteConsoleW 		1.4 21 guest

keyword